Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa
File:                     3230322e38372e3137362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          SfZ0jhebI2afsQBDl6pO+bpG1z5mBTqD6mWtupdGEdA=
Subject key identifier:   73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       67377124CD78AFB3ACDFB3BEEC3D6ED8E9AE7BAD
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa
Signing time:             Sat 06 Apr 2024 04:02:03 +0000
ROA not before:           Sat 06 Apr 2024 03:57:03 +0000
ROA not after:            Sat 05 Apr 2025 04:02:03 +0000
asID:                     38496
IP address blocks:        202.87.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:37:71:24:cd:78:af:b3:ac:df:b3:be:ec:3d:6e:d8:e9:ae:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr  6 03:57:03 2024 GMT
            Not After : Apr  5 04:02:03 2025 GMT
        Subject: CN=73CA56ADA0C6CA2996309CC7703742ADD1950786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:c5:65:45:38:50:78:08:cc:fc:17:ab:b6:
                    77:7e:0a:df:2c:81:d5:92:c8:ba:81:49:77:4d:12:
                    c7:c1:35:18:f2:3f:64:73:86:e9:14:20:a1:40:f6:
                    a1:cc:1c:aa:83:1f:45:1d:94:7a:53:54:d3:1a:25:
                    a8:b3:5d:81:38:1e:e7:1e:77:13:5a:9c:31:0e:0d:
                    0f:e0:12:17:2c:93:c2:6f:9b:a3:be:9e:23:cd:fe:
                    5a:cc:7b:6a:fc:45:6d:5a:0a:40:57:d1:2e:75:90:
                    b4:0d:0f:d4:11:59:56:39:0e:47:d3:3b:40:62:8a:
                    41:e7:c5:21:fb:79:2f:c9:66:42:29:f4:82:d2:28:
                    88:72:b6:92:cc:ca:26:44:4c:7e:71:b8:23:43:a0:
                    2c:7e:63:1e:b1:27:d5:fc:34:02:c1:1b:df:b7:03:
                    cc:ef:7d:24:8c:5f:fd:e2:47:b4:d7:31:30:74:ab:
                    56:93:a8:be:2c:68:6d:9d:cc:bd:45:95:d4:7a:a3:
                    a3:61:e8:bc:85:8f:2a:0d:47:f5:d3:94:3b:d7:f5:
                    6e:86:f6:ef:13:51:b9:27:78:26:62:13:a9:6e:df:
                    81:0e:c6:54:d1:75:7c:d7:e5:0b:dc:64:70:4e:09:
                    fb:1e:40:29:f9:71:9d:38:81:d1:61:c0:b2:d4:c1:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CA:56:AD:A0:C6:CA:29:96:30:9C:C7:70:37:42:AD:D1:95:07:86
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137362e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:28:98:e1:60:25:84:33:36:ee:3e:3d:7f:ce:33:c6:b8:be:
         36:d2:c8:63:a7:15:16:a4:bc:0a:a5:65:d7:b4:29:9d:0f:41:
         60:67:ad:ca:ce:4a:a1:6a:95:e1:15:3d:13:26:f6:e1:5e:72:
         68:10:7f:1c:dc:bb:61:4c:b1:ed:b9:58:ae:f8:d6:47:45:74:
         a4:20:05:36:ba:46:26:2e:09:c3:32:10:7e:7e:df:f2:b7:17:
         10:0e:f5:14:7a:8a:c4:8f:85:01:2c:fb:64:58:c7:44:6b:89:
         75:68:ec:94:f7:a5:e3:20:50:de:c0:0f:2d:95:ee:b0:0c:16:
         a6:20:49:01:cd:fd:64:ae:f8:b2:6e:79:2d:23:91:c1:b7:f7:
         01:6d:27:87:a7:91:2f:89:8f:3a:eb:42:72:39:8c:6e:b5:a2:
         31:62:15:4c:4b:84:ce:c0:9f:2c:14:19:11:3a:29:f3:68:18:
         be:a7:48:12:de:26:1e:c0:71:83:1a:64:c6:5f:4a:f6:f6:e6:
         94:1a:8c:3e:b0:88:f8:71:50:8f:ca:1e:77:f2:4b:90:cf:ff:
         34:54:da:c5:89:b1:0a:30:11:dd:f0:30:0a:59:d8:f1:39:69:
         63:0d:d9:ea:c3:35:72:1a:6e:2e:28:1e:14:ec:a9:76:20:6b:
         39:93:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org